pin bcrypt-rails to 3.0.0